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AMENDMENTS TO THE CLAIMS: 

This listing of the claims will replace all prior versions, and listings, of the claims in this 
application and is submitted herewith per 37 C.F.R. §1.121. 

Claims 1-20, 24, 27 and 28 were previously cancelled without prejudice or disclaimer. 
Claim 42 and 43 are herein canceled without prejudice or disclaimer. 
Claim 44 is newly added. 

Listing of Claims: 

1-20. (Cancelled) 

21 . (Currently Amended) A computer-implemented method to operate a storage area network 
(SAN) in a s e rver environment in which multiple operating system images share one Fibre 
Channel adaptor, tho method comprismg: 

managing tbe ~a storage area network ( SAN) by a SAN Manag e ment software w ith at 
least a SAN Management server and at least a SAN Management client^ said SAN 
Management client running a trusted operating system and w itib -having a communication path 
to smd-a_Fibre Channe l Adapto r adapter, said Fibre Channel adapter being disposed between 
the SAN and at least one computer svstem running an untrusted operating svstem, said SAN 
Management server being comiected to the at least one computer svstem and the SAN 
Management client, said SAN Management client being further connected to the at least one 
computer system, and 

separating requests issued by the SAN Management server into at least two groups, 

where a first group of requests is issued to the SAN Management client and p rocessed 
by the Fibre Channel adapter and the SAN on behalf of the SM -SAN M anagement client in 
place o f the at least one computer syste m operating system images which share the sam e 
Fibre Channel Adaptor, corresponding to a trusted path , and 

a second group of requests is issued to and p rocessed by the operating system images 
at least one computer system w ithout the need to send or receive requests to or from the Fibre 
Channel adapter and the SAN. 
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22. (Previously Presented) The method according to claim 21, further comprising: 

routing all information contained in unsolicited messages generated in the SAN and 
Fibre Channel adapter to the SAN Management server by the SAN management client, 

23. (Currently Amended) The method according to claim 21, further comprising: 

using Host Bus Adapter_Application Program Interface binding requests to modify a 
firewall interposed between the at least one computer system and the Fibre Channel adapter, 
and operating the communication path from the SAN Management client to the Fibre 
Channel adapter so that it cannot be modified or eavesdropped by an operating the at least 
one computer syste m imag>e . 

24. (Cancelled) 

25. (Currently Amended) The method according to claim 21, further comprising: 

accessing all information relevant for billing individual operating system images ones 
of the at least one computer system, where said information is g enerated in the Fibre Channel 
adapter and the SAN and where said information is accessed only through the SAN 
Management clien t on the trusted path . 

26. (Currently Amended) The method according to claim 21, further comprising: 

said SAN Management server providing authorization data to the SAN Management 
client to execute requests from said first group, and said SAN Management server and SAN 
Management client providing authorization data to the OS images at least one computer 
system to execute requests from said second group, and operating the OS images at least one 
computer system so that they are it is only enabled to execute a limited command set in the 
SAN. 

27. (Cancelled) 



28. (Cancelled) 
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29, (Currently Amended) A computer program product apparatus stored on a computer 
usable medium, compriaing: tangibly storing a computer readable program, where the 
computer readable program when executed on a computer causes the computer to operate 
perform operations to manage a storage area network (SAN)^ in an e nvironment in which 
multipl e operating systom imagos (OS images^ share one Fibre Channel adapter by the 
operations-e f comprising! : 

managing the SAN wife -comprising at least a SAN Management server and at least a 
SAN Management client^ said SAN Management client running a trusted operating system 
and w ith -having a communication path to said a^Fibre Channe l Adapte r adapter , said Fibre 
Channel adapter being disposed between the SAN and at least one computer system running 
an untrusted operating system, said SAN Management server being connected to the at least 
one computer system and the SAN Management client, said SAN Management client being 
further connected to the at least one computer system, and 

separating requests issued by the SAN Management server into at least two groups, 

where a first group of requests is issued to the SAN Management client and p rocessed 
by the Fibre Channel adapter and the SAN on behalf of the SM-SANLManagement client in 
place o f the at least one computer syste m operating system imag e s which share the same 
Fibre Channel Adaptor, corresponding to a trusted path , and 

a second group of requests is issued to and p rocessed by the operating system images 
at least one computer system w ithout the need to send or receive requests to or from the Fibre 
Channel adapter and the SAN. 

30. (Currently Amended) The computer program product apparatus as in claim 29, further 
comprising an operation of: 

routing information contained in unsolicited messages generated in at least one of the 
SAN and Fibre Channel adapter to the SAN Management server by the SAN management 
client. 

3 1 . (Currently Amended) The computer program product apparatus as in claim 29, further 
comprising an operation of: 
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using Host Bus Adapter Application Program Interface binding requests to modify a 
firewall interposed between said OS imag e s said at least one computer system and said Fibre 
Channel adapter. 

32. (Currently Amended) The computer program product apparatus as in claim 29, further 
comprising an operation of: 

operating the communication path from the SAN Management client to the Fibre 
Channel adapter so that it cannot be accessed b v the at least one computer system- afi: 
operating system image . 

33. (Currently Amended) The computer program product apparatus as in claim 29, further 
comprising an operation of: 

accessing information relevant for billing individual op e rating system images ones of 
the at least one computer system, where said infomiation is g enerated in the Fibre Channel 
adapter and the SAN and where said information is accessed only through the SAN 
Management clien t on th e trust e d path . 

34. (Currently Amended) The computer program product apparatus as in claim 29, further 
comprising an operation of: 

providing authorization data from the SAN Management server to the SAN 
Management client to execute requests from said first group of requests. 

35. (Currently Amended) The computer program product apparatus as in claim 29, further 
comprising an operation of: 

providing authorization data from the SAN Management server and the SAN 
Management client to the OS images at least one computer system t o execute requests from 
said second group of requests. 

36. (Currently Amended) The computer program product apparatus as in claim 29, further 
comprising an operation of enabling the O S- images at least one computer system t o execute a 
limited command set in the SAN. 
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37. (Ctirrently Amended) The computer program product apparatus as in claim 29, wherein 
th e SAN Managomont aorvor io oquippod with a SAN Managomont Client and a Remote 
Acc e ss Sor\'^Qr (RA Sorv^or), further comprising an operation of maintaining authorization data 
for accessing fee -a Remote Access (R A) Serve r, where said authorization data is maintained 
in at least one of the SAN Management server and the SAN Management Client. 

38. (Currently Amended) The computer program product apparatus as in claim 37, further 
comprising an operation of operating the SAN Management Client as a router for requests 
from the SAN Management server to the RA server. 

39. (Currently Amended) The computer program product apparatus as in claim 37, wherein 
the RA Server comprises a telnet/sshd server. 

40. (Currently Amended) A storage area network (SAN) Management server, comprising: 

a first interface configured t o couple to a SAN Management client that comprises 
running a trusted operating syste m (OS) , said SAN Management client being further coupled 
to a SAN via a SAN adapte r and to at least one computer system running an untrusted 
operating system : and 

a second interface configured t o couple to at -the least one untrusted operating 
computer system, said at least one untrustod OS computer system b eing coupled to the SAN 
via the SAN adapter and via a unit for regulating access to the SAN; 

where said SAN Management server comprises logic for distinguishing a first set of 
requests from a second set of requests, where the first set of requests af ^is issued to the SAN 
Management client and p rocessed in cooperation only with b y the SAN adapter and the SAN 
on behalf of said SAN Management clien t in place of the at least one computer system , and 
where the second set of requests e^e -is issued to and p rocessed at least in part by the at least 
one untrusted operating computer syste m without the need to send or receive requests to or 
from the SAN adapter and the SAN . 
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41. (Currently Amended) The SAN Management server as in claim 40, where said first set of 
requests comprises at least one of a SAN request and a SAN adapter request, and where said 
second set of requests comprises a request for untrusted OS configuration dat a of the at least 
one computer system . 

42. (Cancelled) 

43. (Cancelled) 

44. (New) The computer program product apparatus as in claim 29, where the Fibre Channel 
adapter accepts requests relating to crucial information only from the SAN Management 
client, where the cmcial information comprises information relating to at least one of a SAN 
configuration, a SAN component, SAN access rights, error messages, statistics or billing 
information, where the operation of separating the requests issued by the SAN Management 
server is performed by a communication module that is distributed over the SAN 
Management server and the SAN Management client, further comprising an operation of 
maintaining authorization data for accessing a Remote Access (RA) Server, where said 
authorization data is maintained in at least one of the SAN Management server and the SAN 
Management Client, further comprising an operation of operating the SAN Management 
Client as a router for requests from the SAN Management server to the RA server, wherein 
the RA Server comprises a telnet/sshd server, where the connection between the SM server, 
the SM client and RA server is an intemet protocol (IP) based network. 

45. (New) The computer program product apparatus as in claim 29, where the first group of 
requests comprises authorized SAN access requests and the second group of requests 
comprises operating system configuration requests. 



